oss-sec mailing list archives

Re: CVE requests - kernel: tpm infoleaks


From: Josh Bressers <bressers () redhat com>
Date: Tue, 15 Mar 2011 16:46:51 -0400 (EDT)

----- Original Message -----
[PATCH 1/3] char/tpm: Fix uninitialized usage of data buffer

http://tpmdd.git.sourceforge.net/git/gitweb.cgi?p=tpmdd/tpmdd;a=commitdiff;h=459e0537ebb7b786cd29a26f4e41c721632cd840
infoleak

Please use CVE-2011-1160



[PATCH 2/3] char/tpm: Call tpm_transmit with correct size

http://tpmdd.git.sourceforge.net/git/gitweb.cgi?p=tpmdd/tpmdd;a=commitdiff;h=f0bbed1ee49a4779dfb32159fea669ced8789336
infoleak

Please use CVE-2011-1161



[PATCH 3/3] char/tpm: zero buffer after copying to userspace

http://tpmdd.git.sourceforge.net/git/gitweb.cgi?p=tpmdd/tpmdd;a=commitdiff;h=44480e4077cd782aa8f54eb472b292547f030520
prevents storing of previous result, leakage to other drivers


Please use CVE-2011-1162

Thanks.

-- 
    JB


Current thread: